FedRAMP and TX-RAMP with Continuous Control Assurance
What FedRAMP and TX-RAMP requires
FedRAMP authorizes cloud services for US federal agencies, and TX-RAMP certifies cloud services for Texas state agencies.
FedRAMP is run by the General Services Administration, and its security baselines are built on NIST SP 800-53. TX-RAMP is run by the Texas Department of Information Resources and certifies cloud services at Level 1 or Level 2.
How DigitalXForce covers FedRAMP and TX-RAMP
DigitalXForce helps clients meet FedRAMP, GovRAMP and TX-RAMP requirements with continuous control assessments, documentation and POA&Ms. The DigitalXForce Platform itself is TX-RAMP Level 2 certified (TX1760681).
Testing each control continuously against live evidence is Continuous Control Assurance (CCA), which uses evidence, monitoring and validation to determine whether controls continue to operate as expected. Each control is mapped once in the AI-Powered Risk Management and Automated GRC module and tested with C-Assess for compliance and X-Assess for security.
What is tested from live data and what still needs a person
Which controls DigitalXForce tests directly from live tool data depends on the tools you connect through X-Connect and E-Connect. Controls that rest on a document, such as a signed policy, are reviewed by AI JedAI against the requirement and kept with their evidence. The demo shows that split for your own stack.
The evidence the auditor receives
For each control, the auditor receives the test result, the evidence it read, the time it was read and the history of earlier results. A-Assess prepares the evidence and findings in the form auditors review.
Other frameworks the same controls report to
Because FedRAMP baselines are built on NIST SP 800-53, a control tested for FedRAMP often also answers requirements in NIST CSF 2.0, CMMC Level 2 and ISO/IEC 27001. DigitalXForce maps such a control once, so one test result reports to each framework it belongs to. The article on the common control framework explains the method.
Where to go next
The public sector page shows how DigitalXForce works for federal and state agencies. Request a demo to see your own FedRAMP and TX-RAMP controls tested.
DigitalXForce is not a certification, assessment or authorization body for FedRAMP or TX-RAMP. It tests and documents the controls the framework requires.
